registry / @vtex/faststore-plugin-buyer-portal / 2.0.26

@vtex/faststore-plugin-buyer-portal@2.0.26

A plugin for faststore with buyer portal

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The flagged credential handling is a visible, route-gated authentication handoff to hard-coded iframe origins, with both target-origin and sender-window checks. Inspection found no install hook abuse, self-dependency chain, hidden execution, or unrestricted exfiltration sink.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An authorized user opens a buyer-agent or order-entry page.

Impact

The fixed iframe services receive the user token needed for the agent functionality; no unrestricted credential export or install-time execution was found.

Mechanism

Restricted cross-origin postMessage authentication handoff to embedded iframe applications.

AI rationale

Network endpoints2

buyer-bulk-ops-agent.vercel.apporder-entry-agent.vercel.app

Decision evidence

public snapshot

AI called this Clean at 82.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

The manifest has no preinstall, install, or postinstall hook; its only lifecycle-related script is a Husky prepare command.
The buyer-agent iframe destination is a fixed development or production URL, not an operator-configured endpoint.
Authentication data is sent only to the computed fixed iframe origin, and incoming messages must match both that origin and the embedded iframe window.
The token forwarding occurs only when an authorized user visits the dedicated buyer-agent page.

Evidence against

The package forwards an existing VTEX authentication token to external iframe applications, so those fixed services must be trusted.
The manifest declares a prepare script, but the inspected source shows no broad project mutation or automatic payload chain.

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

5 flagged

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Lines 1-84typescript

1import { useEffect, useMemo, useRef } from "react";

3import { useLocalization } from "../../../shared/localization/LocalizationContext";

4import { isDevelopment } from "../../../shared/utils/environment";

6const B2B_AGENT_URL = isDevelopment()

7 ? "http://localhost:3001/app/buyer-bulk-ops-agent"

8 : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent";

Low

Ai Review Evidence

The buyer-agent iframe destination is a fixed development or production URL, not an operator-configured endpoint.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L6

10interface B2BAgentLayoutProps {

11 vtexIdclientAutCookie: string;

12 account: string;

13 locale?: string;

14 customerId?: string;

15 userId?: string;

16}

18const containerStyle: React.CSSProperties = {

19 display: "flex",

20 flexDirection: "column",

21 width: "100%",

22 height: "100vh",

23 overflow: "hidden",

24};

26const iframeStyle: React.CSSProperties = {

30 border: "none",

31};

33export const B2BAgentLayout = ({

34 vtexIdclientAutCookie,

35 account,

36 locale,

37 customerId,

38 userId,

39}: B2BAgentLayoutProps) => {

40 const { t } = useLocalization();

41 const iframeRef = useRef<HTMLIFrameElement>(null);

43 const agentOrigin = useMemo(() => new URL(B2B_AGENT_URL).origin, []);

45 useEffect(() => {

46 function postAuthToIframe() {

47 const targetWindow = iframeRef.current?.contentWindow;

48 if (!targetWindow) return;

50 // We send only the token (not the full Cookie header) to reduce exposure.

51 targetWindow.postMessage(

52 {

53 type: "AUTH_TOKEN_UPDATE",

54 vtexIdclientAutCookie,

55 account,

56 locale,

57 customerId,

58 userId,

59 },

60 agentOrigin

61 );

Low

Ai Review Evidence

Authentication data is sent only to the computed fixed iframe origin, and incoming messages must match both that origin and the embedded iframe window.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L50

62 }

64 function onMessage(event: MessageEvent) {

65 // Only accept messages coming from the iframe's origin.

66 if (event.origin !== agentOrigin) return;

68 // Ensure the message is from the iframe window we embedded.

69 if (event.source !== iframeRef.current?.contentWindow) return;

71 // Handshake: child tells it is ready; parent responds by sending auth.

72 if (event.data?.type === "B2B_AGENT_READY") {

73 postAuthToIframe();

Low

Ai Review Evidence

Authentication data is sent only to the computed fixed iframe origin, and incoming messages must match both that origin and the embedded iframe window.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L64

74 }

75 }

77 window.addEventListener("message", onMessage);

79 // Fallback: try once after iframe load in case READY was missed.

80 const iframe = iframeRef.current;

81 const onLoad = () => {

82 // Small delay to allow the iframe app to attach its message listener.

83 setTimeout(() => {

84 postAuthToIframe();

•Credential-bearing message sent to a fixed external iframe in src/features/b2b-[redacted].tsx: : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; const targetWindow = iframeRef.current?.contentWindow; targetWindow.postMessage( if (event.source !== iframeRef.current?.contentWindow) return; if (iframeRef.current?.contentWindow && vtexIdclientAutCookie) { <iframe

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

package.jsonView file

Lines 1-32json

2 "name": "@vtex/faststore-plugin-buyer-portal",

3 "version": "2.0.26",

4 "description": "A plugin for faststore with buyer portal",

5 "main": "index.js",

Source & flagged code

5 flagged · loading source

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

6const B2B_AGENT_URL = isDevelopment() ? "http://localhost:3001/app/buyer-bulk-ops-agent" : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent";

Low

Ai Review Evidence

The buyer-agent iframe destination is a fixed development or production URL, not an operator-configured endpoint.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L6

Findings

1 Critical3 Medium8 Low

CriticalHardcoded Runtime Data Exfiltrationsrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencesrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

Affected versions and remediation

This report applies to @vtex/faststore-plugin-buyer-portal@2.0.26.

See all versions of @vtex/faststore-plugin-buyer-portal for other recorded verdicts.

Review the evidence and your use of @vtex/faststore-plugin-buyer-portal@2.0.26 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 14:22:06.639Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.